@lalternative/auth 0.1.1

package/README.md

@@ -0,0 +1,40 @@
+# @lalternative/auth
+
+Shared [Better Auth](https://better-auth.com) wrapper for L'Alternative apps.
+
+Provides platform auth defaults (email-OTP + admin plugins), a React client,
+and the auth UI forms (verify-email, forgot/reset password, auth layout).
+
+## Install
+
+```bash
+pnpm add @lalternative/auth better-auth react react-dom
+```
+
+The package is published to GitHub Packages. Consumers need a `.npmrc`:
+
+```
+@lalternative:registry=https://npm.pkg.github.com
+//npm.pkg.github.com/:_authToken=${GITHUB_TOKEN}
+```
+
+## Usage
+
+```ts
+// server (e.g. lib/auth.ts)
+import { createPlatformAuth } from "@lalternative/auth/server"
+
+export const auth = createPlatformAuth({ database, secret, /* ... */ })
+```
+
+```ts
+// client (e.g. lib/auth-client.ts)
+import { createPlatformAuthClient } from "@lalternative/auth/client"
+
+export const authClient = createPlatformAuthClient({ baseURL })
+```
+
+```tsx
+// UI + hooks
+import { VerifyEmailForm, ForgotPasswordForm, ResetPasswordForm, AuthLayout, useSession, useLogout } from "@lalternative/auth"
+```

package/dist/client.d.ts

@@ -0,0 +1,15 @@
+import * as better_auth_react from 'better-auth/react';
+import { P as PlatformAuthClientConfig } from './types-CLsvniwT.js';
+import 'better-auth';
+
+/**
+ * Creates a Better Auth client for React usage.
+ * Provides useSession() hook and other React-integrated methods.
+ */
+declare function createPlatformAuthClient(config?: PlatformAuthClientConfig): better_auth_react.ReactAuthClient<{
+    baseURL: string;
+    plugins: any[];
+}>;
+type PlatformAuthClient = ReturnType<typeof createPlatformAuthClient>;
+
+export { type PlatformAuthClient, createPlatformAuthClient };

package/dist/client.js

@@ -0,0 +1,13 @@
+// src/client.ts
+import { createAuthClient } from "better-auth/react";
+import { emailOTPClient, adminClient } from "better-auth/client/plugins";
+function createPlatformAuthClient(config) {
+  return createAuthClient({
+    baseURL: config?.baseURL ?? (typeof window !== "undefined" ? window.location.origin : "http://localhost:3000"),
+    plugins: [emailOTPClient(), adminClient(), ...config?.plugins ?? []]
+  });
+}
+export {
+  createPlatformAuthClient
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"sourcesContent":["import { createAuthClient } from \"better-auth/react\"\nimport { emailOTPClient, adminClient } from \"better-auth/client/plugins\"\nimport type { PlatformAuthClientConfig } from \"./types\"\n\n/**\n * Creates a Better Auth client for React usage.\n * Provides useSession() hook and other React-integrated methods.\n */\nexport function createPlatformAuthClient(config?: PlatformAuthClientConfig) {\n  return createAuthClient({\n    baseURL:\n      config?.baseURL ??\n      (typeof window !== \"undefined\"\n        ? window.location.origin\n        : \"http://localhost:3000\"),\n    plugins: [emailOTPClient(), adminClient(), ...(config?.plugins ?? [])],\n  })\n}\n\nexport type PlatformAuthClient = ReturnType<typeof createPlatformAuthClient>\n"],"mappings":";AAAA,SAAS,wBAAwB;AACjC,SAAS,gBAAgB,mBAAmB;AAOrC,SAAS,yBAAyB,QAAmC;AAC1E,SAAO,iBAAiB;AAAA,IACtB,SACE,QAAQ,YACP,OAAO,WAAW,cACf,OAAO,SAAS,SAChB;AAAA,IACN,SAAS,CAAC,eAAe,GAAG,YAAY,GAAG,GAAI,QAAQ,WAAW,CAAC,CAAE;AAAA,EACvE,CAAC;AACH;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,55 @@
+import { V as VerifyEmailFormProps, F as ForgotPasswordFormProps, R as ResetPasswordFormProps, A as AuthLayoutProps } from './types-CLsvniwT.js';
+export { P as PlatformAuthClientConfig, a as PlatformAuthConfig, b as PlatformAuthMailer, c as PlatformAuthMailerArgs, d as PlatformAuthMailerType } from './types-CLsvniwT.js';
+import * as better_auth_react from 'better-auth/react';
+import * as better_auth from 'better-auth';
+import { PlatformAuthClient } from './client.js';
+import * as react from 'react';
+
+/**
+ * Returns a useSession hook bound to the given auth client.
+ * Usage: const { data: session, isPending } = useSession(authClient)
+ */
+declare function useSession(authClient: PlatformAuthClient): {
+    data: {
+        user: better_auth.StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        }>;
+        session: better_auth.StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+        }>;
+    } | null;
+    isPending: boolean;
+    isRefetching: boolean;
+    error: better_auth_react.BetterFetchError | null;
+    refetch: (queryParams?: {
+        query?: better_auth.SessionQueryParams;
+    } | undefined) => Promise<void>;
+};
+/**
+ * Returns a logout function bound to the given auth client.
+ * Usage: const logout = useLogout(authClient)
+ */
+declare function useLogout(authClient: PlatformAuthClient): () => Promise<void>;
+
+declare function VerifyEmailForm({ email, onSuccess, authClient, }: VerifyEmailFormProps): react.JSX.Element;
+
+declare function ForgotPasswordForm({ onSuccess, loginUrl, authClient, }: ForgotPasswordFormProps): react.JSX.Element;
+
+declare function ResetPasswordForm({ email, onSuccess, loginUrl, authClient, }: ResetPasswordFormProps): react.JSX.Element;
+
+declare function AuthLayout({ logo, title, subtitle, children, footer, }: AuthLayoutProps): react.JSX.Element;
+
+export { AuthLayout, AuthLayoutProps, ForgotPasswordForm, ForgotPasswordFormProps, ResetPasswordForm, ResetPasswordFormProps, VerifyEmailForm, VerifyEmailFormProps, useLogout, useSession };

package/dist/index.js

@@ -0,0 +1,395 @@
+// src/hooks/use-session.ts
+function useSession(authClient) {
+  return authClient.useSession();
+}
+function useLogout(authClient) {
+  const signOut = async () => {
+    await authClient.signOut();
+  };
+  return signOut;
+}
+
+// src/components/verify-email-form.tsx
+import { useState } from "react";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+function VerifyEmailForm({
+  email,
+  onSuccess,
+  authClient
+}) {
+  const [otp, setOtp] = useState("");
+  const [isVerifying, setIsVerifying] = useState(false);
+  const [isResending, setIsResending] = useState(false);
+  const [resendMessage, setResendMessage] = useState();
+  const [error, setError] = useState();
+  const handleVerify = async (e) => {
+    e.preventDefault();
+    if (!otp.trim() || otp.length < 6) {
+      setError("Please enter the 6-digit code");
+      return;
+    }
+    setError(void 0);
+    setIsVerifying(true);
+    try {
+      const res = await authClient.emailOtp.verifyEmail({ email, otp });
+      console.log("[verify-email] response:", JSON.stringify(res?.data), "error:", JSON.stringify(res?.error));
+      if (res?.error) {
+        setError(res.error.message ?? "Invalid code. Please try again.");
+        return;
+      }
+      onSuccess?.();
+    } catch (err) {
+      setError(err instanceof Error ? err.message : "Invalid code. Please try again.");
+    } finally {
+      setIsVerifying(false);
+    }
+  };
+  const handleResend = async () => {
+    if (!email) {
+      setError("Email address is not available. Please register again.");
+      return;
+    }
+    setError(void 0);
+    setResendMessage(void 0);
+    setIsResending(true);
+    try {
+      await authClient.emailOtp.sendVerificationOtp({
+        email,
+        type: "email-verification"
+      });
+      setResendMessage("A new code has been sent to your inbox.");
+    } catch (err) {
+      setError(err instanceof Error ? err.message : "Failed to resend code.");
+    } finally {
+      setIsResending(false);
+    }
+  };
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-8", children: [
+    /* @__PURE__ */ jsxs("div", { children: [
+      /* @__PURE__ */ jsx("h1", { className: "text-2xl font-bold tracking-tight", children: "Verify your email" }),
+      /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: email ? /* @__PURE__ */ jsxs(Fragment, { children: [
+        "Enter the 6-digit code sent to",
+        " ",
+        /* @__PURE__ */ jsx("span", { className: "font-medium text-foreground", children: email })
+      ] }) : "Enter the 6-digit code sent to your email" })
+    ] }),
+    error && /* @__PURE__ */ jsx("div", { className: "rounded-lg border border-destructive/20 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: error }),
+    resendMessage && /* @__PURE__ */ jsx("div", { className: "rounded-lg border border-green-200 bg-green-50 px-3 py-2 text-xs text-green-700", children: resendMessage }),
+    /* @__PURE__ */ jsxs("form", { onSubmit: handleVerify, className: "space-y-4", noValidate: true, children: [
+      /* @__PURE__ */ jsx(
+        "input",
+        {
+          type: "text",
+          inputMode: "numeric",
+          pattern: "[0-9]*",
+          maxLength: 6,
+          value: otp,
+          onChange: (e) => setOtp(e.target.value.replace(/\D/g, "")),
+          placeholder: "000000",
+          required: true,
+          disabled: isVerifying,
+          autoComplete: "one-time-code",
+          className: "flex h-12 w-full rounded-md border border-input bg-background px-3 py-2 text-center text-lg tracking-[0.4em] font-mono ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
+        }
+      ),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "submit",
+          disabled: isVerifying || otp.length < 6,
+          className: "inline-flex h-11 w-full items-center justify-center rounded-md bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50",
+          children: isVerifying ? "Verifying..." : "Verify email"
+        }
+      ),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          onClick: handleResend,
+          disabled: isResending,
+          className: "inline-flex h-11 w-full items-center justify-center rounded-md border border-input bg-background px-4 text-sm font-medium transition-colors hover:bg-accent hover:text-accent-foreground disabled:pointer-events-none disabled:opacity-50",
+          children: isResending ? "Sending..." : "Resend code"
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxs("p", { className: "text-center text-sm text-muted-foreground", children: [
+      "Already verified?",
+      " ",
+      /* @__PURE__ */ jsx(
+        "a",
+        {
+          href: "/login",
+          className: "font-medium text-foreground underline underline-offset-4 hover:text-foreground/80",
+          children: "Sign in"
+        }
+      )
+    ] })
+  ] });
+}
+
+// src/components/forgot-password-form.tsx
+import { useState as useState2 } from "react";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+function ForgotPasswordForm({
+  onSuccess,
+  loginUrl = "/login",
+  authClient
+}) {
+  const [email, setEmail] = useState2("");
+  const [error, setError] = useState2();
+  const [isPending, setIsPending] = useState2(false);
+  const handleSubmit = async (e) => {
+    e.preventDefault();
+    if (!email.trim()) {
+      setError("Please enter your email address");
+      return;
+    }
+    setError(void 0);
+    setIsPending(true);
+    try {
+      const res = await authClient.emailOtp.sendVerificationOtp({
+        email,
+        type: "forget-password"
+      });
+      if (res?.error) {
+        setError(res.error.message ?? "Failed to send reset code");
+        return;
+      }
+      onSuccess?.(email);
+    } catch (err) {
+      setError(err instanceof Error ? err.message : "Failed to send reset code");
+    } finally {
+      setIsPending(false);
+    }
+  };
+  return /* @__PURE__ */ jsxs2("div", { className: "space-y-8", children: [
+    /* @__PURE__ */ jsxs2("div", { children: [
+      /* @__PURE__ */ jsx2("h1", { className: "text-2xl font-bold tracking-tight", children: "Forgot your password?" }),
+      /* @__PURE__ */ jsx2("p", { className: "mt-1 text-sm text-muted-foreground", children: "Enter your email address and we'll send you a code to reset your password." })
+    ] }),
+    error && /* @__PURE__ */ jsx2("div", { className: "rounded-lg border border-destructive/20 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: error }),
+    /* @__PURE__ */ jsxs2("form", { onSubmit: handleSubmit, className: "space-y-4", noValidate: true, children: [
+      /* @__PURE__ */ jsx2(
+        "input",
+        {
+          type: "email",
+          value: email,
+          onChange: (e) => setEmail(e.target.value),
+          placeholder: "Email address",
+          required: true,
+          disabled: isPending,
+          autoComplete: "email",
+          className: "flex h-11 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
+        }
+      ),
+      /* @__PURE__ */ jsx2(
+        "button",
+        {
+          type: "submit",
+          disabled: isPending || !email.trim(),
+          className: "inline-flex h-11 w-full items-center justify-center rounded-md bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50",
+          children: isPending ? "Sending..." : "Send reset code"
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxs2("p", { className: "text-center text-sm text-muted-foreground", children: [
+      "Remember your password?",
+      " ",
+      /* @__PURE__ */ jsx2(
+        "a",
+        {
+          href: loginUrl,
+          className: "font-medium text-foreground underline underline-offset-4 hover:text-foreground/80",
+          children: "Sign in"
+        }
+      )
+    ] })
+  ] });
+}
+
+// src/components/reset-password-form.tsx
+import { useState as useState3 } from "react";
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+function ResetPasswordForm({
+  email,
+  onSuccess,
+  loginUrl = "/login",
+  authClient
+}) {
+  const [otp, setOtp] = useState3("");
+  const [password, setPassword] = useState3("");
+  const [confirmPassword, setConfirmPassword] = useState3("");
+  const [error, setError] = useState3();
+  const [isResetting, setIsResetting] = useState3(false);
+  const [isResending, setIsResending] = useState3(false);
+  const [resendMessage, setResendMessage] = useState3();
+  const handleSubmit = async (e) => {
+    e.preventDefault();
+    if (!otp.trim() || otp.length < 6) {
+      setError("Please enter the 6-digit code");
+      return;
+    }
+    if (password.length < 8) {
+      setError("Password must be at least 8 characters");
+      return;
+    }
+    if (password !== confirmPassword) {
+      setError("Passwords do not match");
+      return;
+    }
+    setError(void 0);
+    setIsResetting(true);
+    try {
+      const res = await fetch("/api/auth/email-otp/reset-password", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ email, otp, password })
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => null);
+        setError(body?.message ?? "Failed to reset password");
+        return;
+      }
+      onSuccess?.();
+    } catch (err) {
+      setError(
+        err instanceof Error ? err.message : "Failed to reset password"
+      );
+    } finally {
+      setIsResetting(false);
+    }
+  };
+  const handleResend = async () => {
+    setError(void 0);
+    setResendMessage(void 0);
+    setIsResending(true);
+    try {
+      await authClient.emailOtp.sendVerificationOtp({
+        email,
+        type: "forget-password"
+      });
+      setResendMessage("A new code has been sent to your inbox.");
+    } catch (err) {
+      setError(err instanceof Error ? err.message : "Failed to resend code.");
+    } finally {
+      setIsResending(false);
+    }
+  };
+  return /* @__PURE__ */ jsxs3("div", { className: "space-y-8", children: [
+    /* @__PURE__ */ jsxs3("div", { children: [
+      /* @__PURE__ */ jsx3("h1", { className: "text-2xl font-bold tracking-tight", children: "Reset your password" }),
+      /* @__PURE__ */ jsxs3("p", { className: "mt-1 text-sm text-muted-foreground", children: [
+        "Enter the 6-digit code sent to",
+        " ",
+        /* @__PURE__ */ jsx3("span", { className: "font-medium text-foreground", children: email }),
+        " and your new password."
+      ] })
+    ] }),
+    error && /* @__PURE__ */ jsx3("div", { className: "rounded-lg border border-destructive/20 bg-destructive/10 px-3 py-2 text-xs text-destructive", children: error }),
+    resendMessage && /* @__PURE__ */ jsx3("div", { className: "rounded-lg border border-green-200 bg-green-50 px-3 py-2 text-xs text-green-700", children: resendMessage }),
+    /* @__PURE__ */ jsxs3("form", { onSubmit: handleSubmit, className: "space-y-4", noValidate: true, children: [
+      /* @__PURE__ */ jsx3(
+        "input",
+        {
+          type: "text",
+          inputMode: "numeric",
+          pattern: "[0-9]*",
+          maxLength: 6,
+          value: otp,
+          onChange: (e) => setOtp(e.target.value.replace(/\D/g, "")),
+          placeholder: "000000",
+          required: true,
+          disabled: isResetting,
+          autoComplete: "one-time-code",
+          className: "flex h-12 w-full rounded-md border border-input bg-background px-3 py-2 text-center text-lg tracking-[0.4em] font-mono ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
+        }
+      ),
+      /* @__PURE__ */ jsx3(
+        "input",
+        {
+          type: "password",
+          value: password,
+          onChange: (e) => setPassword(e.target.value),
+          placeholder: "New password",
+          required: true,
+          disabled: isResetting,
+          autoComplete: "new-password",
+          className: "flex h-11 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
+        }
+      ),
+      /* @__PURE__ */ jsx3(
+        "input",
+        {
+          type: "password",
+          value: confirmPassword,
+          onChange: (e) => setConfirmPassword(e.target.value),
+          placeholder: "Confirm new password",
+          required: true,
+          disabled: isResetting,
+          autoComplete: "new-password",
+          className: "flex h-11 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
+        }
+      ),
+      /* @__PURE__ */ jsx3(
+        "button",
+        {
+          type: "submit",
+          disabled: isResetting || otp.length < 6 || !password,
+          className: "inline-flex h-11 w-full items-center justify-center rounded-md bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50",
+          children: isResetting ? "Resetting..." : "Reset password"
+        }
+      ),
+      /* @__PURE__ */ jsx3(
+        "button",
+        {
+          type: "button",
+          onClick: handleResend,
+          disabled: isResending,
+          className: "inline-flex h-11 w-full items-center justify-center rounded-md border border-input bg-background px-4 text-sm font-medium transition-colors hover:bg-accent hover:text-accent-foreground disabled:pointer-events-none disabled:opacity-50",
+          children: isResending ? "Sending..." : "Resend code"
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxs3("p", { className: "text-center text-sm text-muted-foreground", children: [
+      "Remember your password?",
+      " ",
+      /* @__PURE__ */ jsx3(
+        "a",
+        {
+          href: loginUrl,
+          className: "font-medium text-foreground underline underline-offset-4 hover:text-foreground/80",
+          children: "Sign in"
+        }
+      )
+    ] })
+  ] });
+}
+
+// src/components/auth-layout.tsx
+import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+function AuthLayout({
+  logo,
+  title,
+  subtitle,
+  children,
+  footer
+}) {
+  return /* @__PURE__ */ jsx4("div", { className: "flex min-h-screen items-center justify-center bg-background", children: /* @__PURE__ */ jsxs4("div", { className: "w-full max-w-md", children: [
+    /* @__PURE__ */ jsxs4("div", { className: "mb-10 text-center", children: [
+      logo && /* @__PURE__ */ jsx4("div", { className: "mb-6 flex justify-center", children: logo }),
+      /* @__PURE__ */ jsx4("h1", { className: "text-[32px] font-light tracking-tight", children: title }),
+      subtitle && /* @__PURE__ */ jsx4("p", { className: "mt-2 text-sm text-muted-foreground", children: subtitle })
+    ] }),
+    /* @__PURE__ */ jsx4("div", { className: "rounded-xl border bg-card p-8 shadow-sm", children }),
+    footer && /* @__PURE__ */ jsx4("div", { className: "mt-6 text-center text-xs text-muted-foreground", children: footer })
+  ] }) });
+}
+export {
+  AuthLayout,
+  ForgotPasswordForm,
+  ResetPasswordForm,
+  VerifyEmailForm,
+  useLogout,
+  useSession
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/hooks/use-session.ts","../src/components/verify-email-form.tsx","../src/components/forgot-password-form.tsx","../src/components/reset-password-form.tsx","../src/components/auth-layout.tsx"],"sourcesContent":["import type { PlatformAuthClient } from \"../client\"\n\n/**\n * Returns a useSession hook bound to the given auth client.\n * Usage: const { data: session, isPending } = useSession(authClient)\n */\nexport function useSession(authClient: PlatformAuthClient) {\n  return authClient.useSession()\n}\n\n/**\n * Returns a logout function bound to the given auth client.\n * Usage: const logout = useLogout(authClient)\n */\nexport function useLogout(authClient: PlatformAuthClient) {\n  const signOut = async () => {\n    await authClient.signOut()\n  }\n  return signOut\n}\n","import { useState, type FormEvent } from \"react\"\nimport type { VerifyEmailFormProps } from \"../types\"\n\nexport function VerifyEmailForm({\n  email,\n  onSuccess,\n  authClient,\n}: VerifyEmailFormProps) {\n  const [otp, setOtp] = useState(\"\")\n  const [isVerifying, setIsVerifying] = useState(false)\n  const [isResending, setIsResending] = useState(false)\n  const [resendMessage, setResendMessage] = useState<string | undefined>()\n  const [error, setError] = useState<string | undefined>()\n\n  const handleVerify = async (e: FormEvent) => {\n    e.preventDefault()\n    if (!otp.trim() || otp.length < 6) {\n      setError(\"Please enter the 6-digit code\")\n      return\n    }\n    setError(undefined)\n    setIsVerifying(true)\n    try {\n      const res = await authClient.emailOtp.verifyEmail({ email, otp })\n      console.log(\"[verify-email] response:\", JSON.stringify(res?.data), \"error:\", JSON.stringify(res?.error))\n      if (res?.error) {\n        setError(res.error.message ?? \"Invalid code. Please try again.\")\n        return\n      }\n      onSuccess?.()\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Invalid code. Please try again.\")\n    } finally {\n      setIsVerifying(false)\n    }\n  }\n\n  const handleResend = async () => {\n    if (!email) {\n      setError(\"Email address is not available. Please register again.\")\n      return\n    }\n    setError(undefined)\n    setResendMessage(undefined)\n    setIsResending(true)\n    try {\n      await authClient.emailOtp.sendVerificationOtp({\n        email,\n        type: \"email-verification\",\n      })\n      setResendMessage(\"A new code has been sent to your inbox.\")\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to resend code.\")\n    } finally {\n      setIsResending(false)\n    }\n  }\n\n  return (\n    <div className=\"space-y-8\">\n      <div>\n        <h1 className=\"text-2xl font-bold tracking-tight\">\n          Verify your email\n        </h1>\n        <p className=\"mt-1 text-sm text-muted-foreground\">\n          {email ? (\n            <>\n              Enter the 6-digit code sent to{\" \"}\n              <span className=\"font-medium text-foreground\">{email}</span>\n            </>\n          ) : (\n            \"Enter the 6-digit code sent to your email\"\n          )}\n        </p>\n      </div>\n\n      {error && (\n        <div className=\"rounded-lg border border-destructive/20 bg-destructive/10 px-3 py-2 text-xs text-destructive\">\n          {error}\n        </div>\n      )}\n\n      {resendMessage && (\n        <div className=\"rounded-lg border border-green-200 bg-green-50 px-3 py-2 text-xs text-green-700\">\n          {resendMessage}\n        </div>\n      )}\n\n      <form onSubmit={handleVerify} className=\"space-y-4\" noValidate>\n        <input\n          type=\"text\"\n          inputMode=\"numeric\"\n          pattern=\"[0-9]*\"\n          maxLength={6}\n          value={otp}\n          onChange={(e) => setOtp(e.target.value.replace(/\\D/g, \"\"))}\n          placeholder=\"000000\"\n          required\n          disabled={isVerifying}\n          autoComplete=\"one-time-code\"\n          className=\"flex h-12 w-full rounded-md border border-input bg-background px-3 py-2 text-center text-lg tracking-[0.4em] font-mono ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed\"\n        />\n\n        <button\n          type=\"submit\"\n          disabled={isVerifying || otp.length < 6}\n          className=\"inline-flex h-11 w-full items-center justify-center rounded-md bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50\"\n        >\n          {isVerifying ? \"Verifying...\" : \"Verify email\"}\n        </button>\n\n        <button\n          type=\"button\"\n          onClick={handleResend}\n          disabled={isResending}\n          className=\"inline-flex h-11 w-full items-center justify-center rounded-md border border-input bg-background px-4 text-sm font-medium transition-colors hover:bg-accent hover:text-accent-foreground disabled:pointer-events-none disabled:opacity-50\"\n        >\n          {isResending ? \"Sending...\" : \"Resend code\"}\n        </button>\n      </form>\n\n      <p className=\"text-center text-sm text-muted-foreground\">\n        Already verified?{\" \"}\n        <a\n          href=\"/login\"\n          className=\"font-medium text-foreground underline underline-offset-4 hover:text-foreground/80\"\n        >\n          Sign in\n        </a>\n      </p>\n    </div>\n  )\n}\n","import { useState, type FormEvent } from \"react\"\nimport type { ForgotPasswordFormProps } from \"../types\"\n\nexport function ForgotPasswordForm({\n  onSuccess,\n  loginUrl = \"/login\",\n  authClient,\n}: ForgotPasswordFormProps) {\n  const [email, setEmail] = useState(\"\")\n  const [error, setError] = useState<string | undefined>()\n  const [isPending, setIsPending] = useState(false)\n\n  const handleSubmit = async (e: FormEvent) => {\n    e.preventDefault()\n    if (!email.trim()) {\n      setError(\"Please enter your email address\")\n      return\n    }\n    setError(undefined)\n    setIsPending(true)\n    try {\n      const res = await authClient.emailOtp.sendVerificationOtp({\n        email,\n        type: \"forget-password\",\n      })\n      if (res?.error) {\n        setError(res.error.message ?? \"Failed to send reset code\")\n        return\n      }\n      onSuccess?.(email)\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to send reset code\")\n    } finally {\n      setIsPending(false)\n    }\n  }\n\n  return (\n    <div className=\"space-y-8\">\n      <div>\n        <h1 className=\"text-2xl font-bold tracking-tight\">\n          Forgot your password?\n        </h1>\n        <p className=\"mt-1 text-sm text-muted-foreground\">\n          Enter your email address and we'll send you a code to reset your\n          password.\n        </p>\n      </div>\n\n      {error && (\n        <div className=\"rounded-lg border border-destructive/20 bg-destructive/10 px-3 py-2 text-xs text-destructive\">\n          {error}\n        </div>\n      )}\n\n      <form onSubmit={handleSubmit} className=\"space-y-4\" noValidate>\n        <input\n          type=\"email\"\n          value={email}\n          onChange={(e) => setEmail(e.target.value)}\n          placeholder=\"Email address\"\n          required\n          disabled={isPending}\n          autoComplete=\"email\"\n          className=\"flex h-11 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed\"\n        />\n\n        <button\n          type=\"submit\"\n          disabled={isPending || !email.trim()}\n          className=\"inline-flex h-11 w-full items-center justify-center rounded-md bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50\"\n        >\n          {isPending ? \"Sending...\" : \"Send reset code\"}\n        </button>\n      </form>\n\n      <p className=\"text-center text-sm text-muted-foreground\">\n        Remember your password?{\" \"}\n        <a\n          href={loginUrl}\n          className=\"font-medium text-foreground underline underline-offset-4 hover:text-foreground/80\"\n        >\n          Sign in\n        </a>\n      </p>\n    </div>\n  )\n}\n","import { useState, type FormEvent } from \"react\"\nimport type { ResetPasswordFormProps } from \"../types\"\n\nexport function ResetPasswordForm({\n  email,\n  onSuccess,\n  loginUrl = \"/login\",\n  authClient,\n}: ResetPasswordFormProps) {\n  const [otp, setOtp] = useState(\"\")\n  const [password, setPassword] = useState(\"\")\n  const [confirmPassword, setConfirmPassword] = useState(\"\")\n  const [error, setError] = useState<string | undefined>()\n  const [isResetting, setIsResetting] = useState(false)\n  const [isResending, setIsResending] = useState(false)\n  const [resendMessage, setResendMessage] = useState<string | undefined>()\n\n  const handleSubmit = async (e: FormEvent) => {\n    e.preventDefault()\n    if (!otp.trim() || otp.length < 6) {\n      setError(\"Please enter the 6-digit code\")\n      return\n    }\n    if (password.length < 8) {\n      setError(\"Password must be at least 8 characters\")\n      return\n    }\n    if (password !== confirmPassword) {\n      setError(\"Passwords do not match\")\n      return\n    }\n    setError(undefined)\n    setIsResetting(true)\n    try {\n      const res = await fetch(\"/api/auth/email-otp/reset-password\", {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ email, otp, password }),\n      })\n      if (!res.ok) {\n        const body = await res.json().catch(() => null)\n        setError(body?.message ?? \"Failed to reset password\")\n        return\n      }\n      onSuccess?.()\n    } catch (err) {\n      setError(\n        err instanceof Error ? err.message : \"Failed to reset password\",\n      )\n    } finally {\n      setIsResetting(false)\n    }\n  }\n\n  const handleResend = async () => {\n    setError(undefined)\n    setResendMessage(undefined)\n    setIsResending(true)\n    try {\n      await authClient.emailOtp.sendVerificationOtp({\n        email,\n        type: \"forget-password\",\n      })\n      setResendMessage(\"A new code has been sent to your inbox.\")\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to resend code.\")\n    } finally {\n      setIsResending(false)\n    }\n  }\n\n  return (\n    <div className=\"space-y-8\">\n      <div>\n        <h1 className=\"text-2xl font-bold tracking-tight\">\n          Reset your password\n        </h1>\n        <p className=\"mt-1 text-sm text-muted-foreground\">\n          Enter the 6-digit code sent to{\" \"}\n          <span className=\"font-medium text-foreground\">{email}</span> and your\n          new password.\n        </p>\n      </div>\n\n      {error && (\n        <div className=\"rounded-lg border border-destructive/20 bg-destructive/10 px-3 py-2 text-xs text-destructive\">\n          {error}\n        </div>\n      )}\n\n      {resendMessage && (\n        <div className=\"rounded-lg border border-green-200 bg-green-50 px-3 py-2 text-xs text-green-700\">\n          {resendMessage}\n        </div>\n      )}\n\n      <form onSubmit={handleSubmit} className=\"space-y-4\" noValidate>\n        <input\n          type=\"text\"\n          inputMode=\"numeric\"\n          pattern=\"[0-9]*\"\n          maxLength={6}\n          value={otp}\n          onChange={(e) => setOtp(e.target.value.replace(/\\D/g, \"\"))}\n          placeholder=\"000000\"\n          required\n          disabled={isResetting}\n          autoComplete=\"one-time-code\"\n          className=\"flex h-12 w-full rounded-md border border-input bg-background px-3 py-2 text-center text-lg tracking-[0.4em] font-mono ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed\"\n        />\n\n        <input\n          type=\"password\"\n          value={password}\n          onChange={(e) => setPassword(e.target.value)}\n          placeholder=\"New password\"\n          required\n          disabled={isResetting}\n          autoComplete=\"new-password\"\n          className=\"flex h-11 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed\"\n        />\n\n        <input\n          type=\"password\"\n          value={confirmPassword}\n          onChange={(e) => setConfirmPassword(e.target.value)}\n          placeholder=\"Confirm new password\"\n          required\n          disabled={isResetting}\n          autoComplete=\"new-password\"\n          className=\"flex h-11 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50 disabled:cursor-not-allowed\"\n        />\n\n        <button\n          type=\"submit\"\n          disabled={isResetting || otp.length < 6 || !password}\n          className=\"inline-flex h-11 w-full items-center justify-center rounded-md bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50\"\n        >\n          {isResetting ? \"Resetting...\" : \"Reset password\"}\n        </button>\n\n        <button\n          type=\"button\"\n          onClick={handleResend}\n          disabled={isResending}\n          className=\"inline-flex h-11 w-full items-center justify-center rounded-md border border-input bg-background px-4 text-sm font-medium transition-colors hover:bg-accent hover:text-accent-foreground disabled:pointer-events-none disabled:opacity-50\"\n        >\n          {isResending ? \"Sending...\" : \"Resend code\"}\n        </button>\n      </form>\n\n      <p className=\"text-center text-sm text-muted-foreground\">\n        Remember your password?{\" \"}\n        <a\n          href={loginUrl}\n          className=\"font-medium text-foreground underline underline-offset-4 hover:text-foreground/80\"\n        >\n          Sign in\n        </a>\n      </p>\n    </div>\n  )\n}\n","import type { AuthLayoutProps } from \"../types\"\n\nexport function AuthLayout({\n  logo,\n  title,\n  subtitle,\n  children,\n  footer,\n}: AuthLayoutProps) {\n  return (\n    <div className=\"flex min-h-screen items-center justify-center bg-background\">\n      <div className=\"w-full max-w-md\">\n        <div className=\"mb-10 text-center\">\n          {logo && <div className=\"mb-6 flex justify-center\">{logo}</div>}\n          <h1 className=\"text-[32px] font-light tracking-tight\">{title}</h1>\n          {subtitle && (\n            <p className=\"mt-2 text-sm text-muted-foreground\">{subtitle}</p>\n          )}\n        </div>\n\n        <div className=\"rounded-xl border bg-card p-8 shadow-sm\">\n          {children}\n        </div>\n\n        {footer && (\n          <div className=\"mt-6 text-center text-xs text-muted-foreground\">\n            {footer}\n          </div>\n        )}\n      </div>\n    </div>\n  )\n}\n"],"mappings":";AAMO,SAAS,WAAW,YAAgC;AACzD,SAAO,WAAW,WAAW;AAC/B;AAMO,SAAS,UAAU,YAAgC;AACxD,QAAM,UAAU,YAAY;AAC1B,UAAM,WAAW,QAAQ;AAAA,EAC3B;AACA,SAAO;AACT;;;ACnBA,SAAS,gBAAgC;AA6DjC,SAKI,UALJ,KAKI,YALJ;AA1DD,SAAS,gBAAgB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,GAAyB;AACvB,QAAM,CAAC,KAAK,MAAM,IAAI,SAAS,EAAE;AACjC,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAA6B;AACvE,QAAM,CAAC,OAAO,QAAQ,IAAI,SAA6B;AAEvD,QAAM,eAAe,OAAO,MAAiB;AAC3C,MAAE,eAAe;AACjB,QAAI,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,GAAG;AACjC,eAAS,+BAA+B;AACxC;AAAA,IACF;AACA,aAAS,MAAS;AAClB,mBAAe,IAAI;AACnB,QAAI;AACF,YAAM,MAAM,MAAM,WAAW,SAAS,YAAY,EAAE,OAAO,IAAI,CAAC;AAChE,cAAQ,IAAI,4BAA4B,KAAK,UAAU,KAAK,IAAI,GAAG,UAAU,KAAK,UAAU,KAAK,KAAK,CAAC;AACvG,UAAI,KAAK,OAAO;AACd,iBAAS,IAAI,MAAM,WAAW,iCAAiC;AAC/D;AAAA,MACF;AACA,kBAAY;AAAA,IACd,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,IAAI,UAAU,iCAAiC;AAAA,IACjF,UAAE;AACA,qBAAe,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,eAAe,YAAY;AAC/B,QAAI,CAAC,OAAO;AACV,eAAS,wDAAwD;AACjE;AAAA,IACF;AACA,aAAS,MAAS;AAClB,qBAAiB,MAAS;AAC1B,mBAAe,IAAI;AACnB,QAAI;AACF,YAAM,WAAW,SAAS,oBAAoB;AAAA,QAC5C;AAAA,QACA,MAAM;AAAA,MACR,CAAC;AACD,uBAAiB,yCAAyC;AAAA,IAC5D,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IACxE,UAAE;AACA,qBAAe,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,SACE,qBAAC,SAAI,WAAU,aACb;AAAA,yBAAC,SACC;AAAA,0BAAC,QAAG,WAAU,qCAAoC,+BAElD;AAAA,MACA,oBAAC,OAAE,WAAU,sCACV,kBACC,iCAAE;AAAA;AAAA,QAC+B;AAAA,QAC/B,oBAAC,UAAK,WAAU,+BAA+B,iBAAM;AAAA,SACvD,IAEA,6CAEJ;AAAA,OACF;AAAA,IAEC,SACC,oBAAC,SAAI,WAAU,gGACZ,iBACH;AAAA,IAGD,iBACC,oBAAC,SAAI,WAAU,mFACZ,yBACH;AAAA,IAGF,qBAAC,UAAK,UAAU,cAAc,WAAU,aAAY,YAAU,MAC5D;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAAQ;AAAA,UACR,WAAW;AAAA,UACX,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,OAAO,EAAE,OAAO,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,UACzD,aAAY;AAAA,UACZ,UAAQ;AAAA,UACR,UAAU;AAAA,UACV,cAAa;AAAA,UACb,WAAU;AAAA;AAAA,MACZ;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU,eAAe,IAAI,SAAS;AAAA,UACtC,WAAU;AAAA,UAET,wBAAc,iBAAiB;AAAA;AAAA,MAClC;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU;AAAA,UACV,WAAU;AAAA,UAET,wBAAc,eAAe;AAAA;AAAA,MAChC;AAAA,OACF;AAAA,IAEA,qBAAC,OAAE,WAAU,6CAA4C;AAAA;AAAA,MACrC;AAAA,MAClB;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACX;AAAA;AAAA,MAED;AAAA,OACF;AAAA,KACF;AAEJ;;;ACpIA,SAAS,YAAAA,iBAAgC;AAuCnC,SACE,OAAAC,MADF,QAAAC,aAAA;AApCC,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,WAAW;AAAA,EACX;AACF,GAA4B;AAC1B,QAAM,CAAC,OAAO,QAAQ,IAAIF,UAAS,EAAE;AACrC,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAA6B;AACvD,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,KAAK;AAEhD,QAAM,eAAe,OAAO,MAAiB;AAC3C,MAAE,eAAe;AACjB,QAAI,CAAC,MAAM,KAAK,GAAG;AACjB,eAAS,iCAAiC;AAC1C;AAAA,IACF;AACA,aAAS,MAAS;AAClB,iBAAa,IAAI;AACjB,QAAI;AACF,YAAM,MAAM,MAAM,WAAW,SAAS,oBAAoB;AAAA,QACxD;AAAA,QACA,MAAM;AAAA,MACR,CAAC;AACD,UAAI,KAAK,OAAO;AACd,iBAAS,IAAI,MAAM,WAAW,2BAA2B;AACzD;AAAA,MACF;AACA,kBAAY,KAAK;AAAA,IACnB,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,IAAI,UAAU,2BAA2B;AAAA,IAC3E,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SACE,gBAAAE,MAAC,SAAI,WAAU,aACb;AAAA,oBAAAA,MAAC,SACC;AAAA,sBAAAD,KAAC,QAAG,WAAU,qCAAoC,mCAElD;AAAA,MACA,gBAAAA,KAAC,OAAE,WAAU,sCAAqC,wFAGlD;AAAA,OACF;AAAA,IAEC,SACC,gBAAAA,KAAC,SAAI,WAAU,gGACZ,iBACH;AAAA,IAGF,gBAAAC,MAAC,UAAK,UAAU,cAAc,WAAU,aAAY,YAAU,MAC5D;AAAA,sBAAAD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,aAAY;AAAA,UACZ,UAAQ;AAAA,UACR,UAAU;AAAA,UACV,cAAa;AAAA,UACb,WAAU;AAAA;AAAA,MACZ;AAAA,MAEA,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU,aAAa,CAAC,MAAM,KAAK;AAAA,UACnC,WAAU;AAAA,UAET,sBAAY,eAAe;AAAA;AAAA,MAC9B;AAAA,OACF;AAAA,IAEA,gBAAAC,MAAC,OAAE,WAAU,6CAA4C;AAAA;AAAA,MAC/B;AAAA,MACxB,gBAAAD;AAAA,QAAC;AAAA;AAAA,UACC,MAAM;AAAA,UACN,WAAU;AAAA,UACX;AAAA;AAAA,MAED;AAAA,OACF;AAAA,KACF;AAEJ;;;ACvFA,SAAS,YAAAE,iBAAgC;AA0EjC,gBAAAC,MAGA,QAAAC,aAHA;AAvED,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AACF,GAA2B;AACzB,QAAM,CAAC,KAAK,MAAM,IAAIF,UAAS,EAAE;AACjC,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,EAAE;AAC3C,QAAM,CAAC,iBAAiB,kBAAkB,IAAIA,UAAS,EAAE;AACzD,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAA6B;AACvD,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAS,KAAK;AACpD,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAS,KAAK;AACpD,QAAM,CAAC,eAAe,gBAAgB,IAAIA,UAA6B;AAEvE,QAAM,eAAe,OAAO,MAAiB;AAC3C,MAAE,eAAe;AACjB,QAAI,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,GAAG;AACjC,eAAS,+BAA+B;AACxC;AAAA,IACF;AACA,QAAI,SAAS,SAAS,GAAG;AACvB,eAAS,wCAAwC;AACjD;AAAA,IACF;AACA,QAAI,aAAa,iBAAiB;AAChC,eAAS,wBAAwB;AACjC;AAAA,IACF;AACA,aAAS,MAAS;AAClB,mBAAe,IAAI;AACnB,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,sCAAsC;AAAA,QAC5D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,KAAK,SAAS,CAAC;AAAA,MAC/C,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAC9C,iBAAS,MAAM,WAAW,0BAA0B;AACpD;AAAA,MACF;AACA,kBAAY;AAAA,IACd,SAAS,KAAK;AACZ;AAAA,QACE,eAAe,QAAQ,IAAI,UAAU;AAAA,MACvC;AAAA,IACF,UAAE;AACA,qBAAe,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,eAAe,YAAY;AAC/B,aAAS,MAAS;AAClB,qBAAiB,MAAS;AAC1B,mBAAe,IAAI;AACnB,QAAI;AACF,YAAM,WAAW,SAAS,oBAAoB;AAAA,QAC5C;AAAA,QACA,MAAM;AAAA,MACR,CAAC;AACD,uBAAiB,yCAAyC;AAAA,IAC5D,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IACxE,UAAE;AACA,qBAAe,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,SACE,gBAAAE,MAAC,SAAI,WAAU,aACb;AAAA,oBAAAA,MAAC,SACC;AAAA,sBAAAD,KAAC,QAAG,WAAU,qCAAoC,iCAElD;AAAA,MACA,gBAAAC,MAAC,OAAE,WAAU,sCAAqC;AAAA;AAAA,QACjB;AAAA,QAC/B,gBAAAD,KAAC,UAAK,WAAU,+BAA+B,iBAAM;AAAA,QAAO;AAAA,SAE9D;AAAA,OACF;AAAA,IAEC,SACC,gBAAAA,KAAC,SAAI,WAAU,gGACZ,iBACH;AAAA,IAGD,iBACC,gBAAAA,KAAC,SAAI,WAAU,mFACZ,yBACH;AAAA,IAGF,gBAAAC,MAAC,UAAK,UAAU,cAAc,WAAU,aAAY,YAAU,MAC5D;AAAA,sBAAAD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAAQ;AAAA,UACR,WAAW;AAAA,UACX,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,OAAO,EAAE,OAAO,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,UACzD,aAAY;AAAA,UACZ,UAAQ;AAAA,UACR,UAAU;AAAA,UACV,cAAa;AAAA,UACb,WAAU;AAAA;AAAA,MACZ;AAAA,MAEA,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,UAC3C,aAAY;AAAA,UACZ,UAAQ;AAAA,UACR,UAAU;AAAA,UACV,cAAa;AAAA,UACb,WAAU;AAAA;AAAA,MACZ;AAAA,MAEA,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,mBAAmB,EAAE,OAAO,KAAK;AAAA,UAClD,aAAY;AAAA,UACZ,UAAQ;AAAA,UACR,UAAU;AAAA,UACV,cAAa;AAAA,UACb,WAAU;AAAA;AAAA,MACZ;AAAA,MAEA,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU,eAAe,IAAI,SAAS,KAAK,CAAC;AAAA,UAC5C,WAAU;AAAA,UAET,wBAAc,iBAAiB;AAAA;AAAA,MAClC;AAAA,MAEA,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU;AAAA,UACV,WAAU;AAAA,UAET,wBAAc,eAAe;AAAA;AAAA,MAChC;AAAA,OACF;AAAA,IAEA,gBAAAC,MAAC,OAAE,WAAU,6CAA4C;AAAA;AAAA,MAC/B;AAAA,MACxB,gBAAAD;AAAA,QAAC;AAAA;AAAA,UACC,MAAM;AAAA,UACN,WAAU;AAAA,UACX;AAAA;AAAA,MAED;AAAA,OACF;AAAA,KACF;AAEJ;;;ACtJQ,SACW,OAAAE,MADX,QAAAC,aAAA;AAVD,SAAS,WAAW;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAoB;AAClB,SACE,gBAAAD,KAAC,SAAI,WAAU,+DACb,0BAAAC,MAAC,SAAI,WAAU,mBACb;AAAA,oBAAAA,MAAC,SAAI,WAAU,qBACZ;AAAA,cAAQ,gBAAAD,KAAC,SAAI,WAAU,4BAA4B,gBAAK;AAAA,MACzD,gBAAAA,KAAC,QAAG,WAAU,yCAAyC,iBAAM;AAAA,MAC5D,YACC,gBAAAA,KAAC,OAAE,WAAU,sCAAsC,oBAAS;AAAA,OAEhE;AAAA,IAEA,gBAAAA,KAAC,SAAI,WAAU,2CACZ,UACH;AAAA,IAEC,UACC,gBAAAA,KAAC,SAAI,WAAU,kDACZ,kBACH;AAAA,KAEJ,GACF;AAEJ;","names":["useState","jsx","jsxs","useState","jsx","jsxs","jsx","jsxs"]}

package/dist/server.d.ts

@@ -0,0 +1,11 @@
+import { Auth, BetterAuthOptions } from 'better-auth';
+import { a as PlatformAuthConfig } from './types-CLsvniwT.js';
+
+/**
+ * Creates a Better Auth instance with platform defaults.
+ * Each app calls this with its own config (DB, secret, providers, plugins).
+ */
+declare function createPlatformAuth(config: PlatformAuthConfig): Auth<BetterAuthOptions>;
+type PlatformAuth = ReturnType<typeof createPlatformAuth>;
+
+export { type PlatformAuth, createPlatformAuth };

package/dist/server.js

@@ -0,0 +1,109 @@
+// src/server.ts
+import { betterAuth, APIError } from "better-auth";
+import { emailOTP, admin } from "better-auth/plugins";
+var DEFAULT_EMAIL_SUBJECTS = {
+  "email-verification": "Verify your account",
+  "forget-password": "Reset your password",
+  "sign-in": "Your sign-in code"
+};
+function defaultRenderOtpEmail(otp) {
+  return `
+              <div style="font-family:sans-serif;max-width:480px;margin:0 auto;padding:32px">
+                <h2 style="font-size:20px;font-weight:600;margin-bottom:16px">Your verification code</h2>
+                <p style="color:#555;margin-bottom:24px">Use the code below to continue. It expires in 5 minutes.</p>
+                <div style="background:#f5f5f5;border-radius:8px;padding:24px;text-align:center;letter-spacing:8px;font-size:32px;font-weight:700">
+                  ${otp}
+                </div>
+                <p style="color:#999;font-size:12px;margin-top:24px">If you didn't request this, you can safely ignore this email.</p>
+              </div>
+            `;
+}
+function createPlatformAuth(config) {
+  const {
+    database,
+    baseURL,
+    secret,
+    appName,
+    mailer,
+    google,
+    github,
+    plugins = [],
+    betaMode = false,
+    isInvited,
+    emailSubjects,
+    renderOtpEmail
+  } = config;
+  const subjects = { ...DEFAULT_EMAIL_SUBJECTS, ...emailSubjects };
+  const renderEmail = renderOtpEmail ?? defaultRenderOtpEmail;
+  return betterAuth({
+    database,
+    baseURL,
+    secret,
+    emailAndPassword: {
+      enabled: true,
+      requireEmailVerification: true
+    },
+    hooks: {
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      before: async (ctx) => {
+        if (!betaMode) return;
+        if (ctx.path !== "/sign-up/email") return;
+        const body = ctx.body;
+        const email = body?.email;
+        const inviteToken = body?.inviteToken;
+        if (email && inviteToken && isInvited) {
+          const ok = await isInvited(email, inviteToken);
+          if (ok) return;
+        }
+        throw new APIError("FORBIDDEN", {
+          message: "Registration is invite-only during the private beta."
+        });
+      }
+    },
+    plugins: [
+      emailOTP({
+        async sendVerificationOTP({ email, otp, type }) {
+          const subject = subjects[type] ? `${subjects[type]} - ${appName}` : `Your ${appName} code`;
+          const html = renderEmail(otp, type);
+          if (mailer) {
+            await mailer({
+              to: email,
+              subject,
+              html,
+              type,
+              otp
+            });
+            return;
+          }
+          console.warn(
+            `[EMAIL] No mailer configured \u2014 logging OTP to stdout for ${email} (${type}): ${otp}`
+          );
+        },
+        otpLength: 6,
+        expiresIn: 300,
+        overrideDefaultEmailVerification: true
+      }),
+      admin(),
+      ...plugins
+      // app-specific plugins (e.g. tanstackStartCookies)
+    ],
+    socialProviders: {
+      ...google ? {
+        google: {
+          clientId: google.clientId,
+          clientSecret: google.clientSecret
+        }
+      } : {},
+      ...github ? {
+        github: {
+          clientId: github.clientId,
+          clientSecret: github.clientSecret
+        }
+      } : {}
+    }
+  });
+}
+export {
+  createPlatformAuth
+};
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import { betterAuth, APIError, type Auth, type BetterAuthOptions } from \"better-auth\"\nimport { emailOTP, admin } from \"better-auth/plugins\"\nimport type { PlatformAuthConfig, PlatformAuthMailerType } from \"./types\"\n\nconst DEFAULT_EMAIL_SUBJECTS: Record<string, string> = {\n  \"email-verification\": \"Verify your account\",\n  \"forget-password\": \"Reset your password\",\n  \"sign-in\": \"Your sign-in code\",\n}\n\nfunction defaultRenderOtpEmail(otp: string): string {\n  return `\n              <div style=\"font-family:sans-serif;max-width:480px;margin:0 auto;padding:32px\">\n                <h2 style=\"font-size:20px;font-weight:600;margin-bottom:16px\">Your verification code</h2>\n                <p style=\"color:#555;margin-bottom:24px\">Use the code below to continue. It expires in 5 minutes.</p>\n                <div style=\"background:#f5f5f5;border-radius:8px;padding:24px;text-align:center;letter-spacing:8px;font-size:32px;font-weight:700\">\n                  ${otp}\n                </div>\n                <p style=\"color:#999;font-size:12px;margin-top:24px\">If you didn't request this, you can safely ignore this email.</p>\n              </div>\n            `\n}\n\n/**\n * Creates a Better Auth instance with platform defaults.\n * Each app calls this with its own config (DB, secret, providers, plugins).\n */\nexport function createPlatformAuth(\n  config: PlatformAuthConfig,\n): Auth<BetterAuthOptions> {\n  const {\n    database,\n    baseURL,\n    secret,\n    appName,\n    mailer,\n    google,\n    github,\n    plugins = [],\n    betaMode = false,\n    isInvited,\n    emailSubjects,\n    renderOtpEmail,\n  } = config\n\n  const subjects = { ...DEFAULT_EMAIL_SUBJECTS, ...emailSubjects }\n  const renderEmail = renderOtpEmail ?? defaultRenderOtpEmail\n\n  // The concrete instance type (with email-otp/admin plugins) is widened to\n  // the base Auth type so the published .d.ts stays portable — consumers use\n  // the standard auth API (handler, api.getSession, …), not plugin-inferred types.\n  return betterAuth({\n    database,\n    baseURL,\n    secret,\n    emailAndPassword: {\n      enabled: true,\n      requireEmailVerification: true,\n    },\n    hooks: {\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      before: async (ctx: any) => {\n        if (!betaMode) return\n        if (ctx.path !== \"/sign-up/email\") return\n        const body = ctx.body as { email?: string; inviteToken?: string } | undefined\n        const email = body?.email\n        const inviteToken = body?.inviteToken\n        if (email && inviteToken && isInvited) {\n          const ok = await isInvited(email, inviteToken)\n          if (ok) return\n        }\n        throw new APIError(\"FORBIDDEN\", {\n          message: \"Registration is invite-only during the private beta.\",\n        })\n      },\n    },\n    plugins: [\n      emailOTP({\n        async sendVerificationOTP({ email, otp, type }) {\n          const subject = subjects[type]\n            ? `${subjects[type]} - ${appName}`\n            : `Your ${appName} code`\n          const html = renderEmail(otp, type as PlatformAuthMailerType)\n\n          if (mailer) {\n            await mailer({\n              to: email,\n              subject,\n              html,\n              type: type as PlatformAuthMailerType,\n              otp,\n            })\n            return\n          }\n\n          console.warn(\n            `[EMAIL] No mailer configured — logging OTP to stdout for ${email} (${type}): ${otp}`,\n          )\n        },\n        otpLength: 6,\n        expiresIn: 300,\n        overrideDefaultEmailVerification: true,\n      }),\n      admin(),\n      ...plugins, // app-specific plugins (e.g. tanstackStartCookies)\n    ],\n    socialProviders: {\n      ...(google\n        ? {\n            google: {\n              clientId: google.clientId,\n              clientSecret: google.clientSecret,\n            },\n          }\n        : {}),\n      ...(github\n        ? {\n            github: {\n              clientId: github.clientId,\n              clientSecret: github.clientSecret,\n            },\n          }\n        : {}),\n    },\n  }) as unknown as Auth<BetterAuthOptions>\n}\n\nexport type PlatformAuth = ReturnType<typeof createPlatformAuth>\n"],"mappings":";AAAA,SAAS,YAAY,gBAAmD;AACxE,SAAS,UAAU,aAAa;AAGhC,IAAM,yBAAiD;AAAA,EACrD,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,WAAW;AACb;AAEA,SAAS,sBAAsB,KAAqB;AAClD,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKW,GAAG;AAAA;AAAA;AAAA;AAAA;AAKvB;AAMO,SAAS,mBACd,QACyB;AACzB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,CAAC;AAAA,IACX,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,WAAW,EAAE,GAAG,wBAAwB,GAAG,cAAc;AAC/D,QAAM,cAAc,kBAAkB;AAKtC,SAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,MAChB,SAAS;AAAA,MACT,0BAA0B;AAAA,IAC5B;AAAA,IACA,OAAO;AAAA;AAAA,MAEL,QAAQ,OAAO,QAAa;AAC1B,YAAI,CAAC,SAAU;AACf,YAAI,IAAI,SAAS,iBAAkB;AACnC,cAAM,OAAO,IAAI;AACjB,cAAM,QAAQ,MAAM;AACpB,cAAM,cAAc,MAAM;AAC1B,YAAI,SAAS,eAAe,WAAW;AACrC,gBAAM,KAAK,MAAM,UAAU,OAAO,WAAW;AAC7C,cAAI,GAAI;AAAA,QACV;AACA,cAAM,IAAI,SAAS,aAAa;AAAA,UAC9B,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,SAAS;AAAA,QACP,MAAM,oBAAoB,EAAE,OAAO,KAAK,KAAK,GAAG;AAC9C,gBAAM,UAAU,SAAS,IAAI,IACzB,GAAG,SAAS,IAAI,CAAC,MAAM,OAAO,KAC9B,QAAQ,OAAO;AACnB,gBAAM,OAAO,YAAY,KAAK,IAA8B;AAE5D,cAAI,QAAQ;AACV,kBAAM,OAAO;AAAA,cACX,IAAI;AAAA,cACJ;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,YACF,CAAC;AACD;AAAA,UACF;AAEA,kBAAQ;AAAA,YACN,iEAA4D,KAAK,KAAK,IAAI,MAAM,GAAG;AAAA,UACrF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,kCAAkC;AAAA,MACpC,CAAC;AAAA,MACD,MAAM;AAAA,MACN,GAAG;AAAA;AAAA,IACL;AAAA,IACA,iBAAiB;AAAA,MACf,GAAI,SACA;AAAA,QACE,QAAQ;AAAA,UACN,UAAU,OAAO;AAAA,UACjB,cAAc,OAAO;AAAA,QACvB;AAAA,MACF,IACA,CAAC;AAAA,MACL,GAAI,SACA;AAAA,QACE,QAAQ;AAAA,UACN,UAAU,OAAO;AAAA,UACjB,cAAc,OAAO;AAAA,QACvB;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/types-CLsvniwT.d.ts

@@ -0,0 +1,109 @@
+import { BetterAuthOptions } from 'better-auth';
+
+type PlatformAuthMailerType = "email-verification" | "forget-password" | "sign-in" | "change-email";
+interface PlatformAuthMailerArgs {
+    /** Recipient address */
+    to: string;
+    /** Pre-rendered subject line */
+    subject: string;
+    /** Pre-rendered HTML body */
+    html: string;
+    /** Better Auth verification kind */
+    type: PlatformAuthMailerType;
+    /** The OTP value, in case the consumer wants to render its own template */
+    otp: string;
+}
+type PlatformAuthMailer = (args: PlatformAuthMailerArgs) => Promise<void>;
+interface PlatformAuthConfig {
+    /** PostgreSQL connection pool or connection string */
+    database: BetterAuthOptions["database"];
+    /** Base URL for Better Auth callbacks (e.g. http://localhost:3001) */
+    baseURL: string;
+    /** Secret for signing sessions */
+    secret: string;
+    /** Application name (used in emails) */
+    appName: string;
+    /**
+     * Transactional mailer. Receives the fully-rendered subject and HTML body
+     * and is responsible for pushing the message onto the wire (e.g. via the
+     * @digstack/spore-sdk, SES, postfix, …). When omitted, OTPs are logged to
+     * stdout — useful in dev/test, useless in production.
+     */
+    mailer?: PlatformAuthMailer;
+    /** Google OAuth config (omit to disable) */
+    google?: {
+        clientId: string;
+        clientSecret: string;
+    };
+    /** GitHub OAuth config (omit to disable) */
+    github?: {
+        clientId: string;
+        clientSecret: string;
+    };
+    /**
+     * Override the OTP email subject line per verification type. Merged over
+     * the platform defaults — provide only the keys you want to change. The
+     * resulting subject is suffixed with ` - ${appName}` like the defaults.
+     */
+    emailSubjects?: Partial<Record<PlatformAuthMailerType, string>>;
+    /**
+     * Override the OTP email HTML renderer. Receives the OTP code and the
+     * verification type, returns the HTML body. When omitted, the platform's
+     * default branded template is used.
+     */
+    renderOtpEmail?: (otp: string, type: PlatformAuthMailerType) => string;
+    /** Additional Better Auth plugins to append */
+    plugins?: BetterAuthOptions["plugins"];
+    /** Enable private beta mode (blocks public registration) */
+    betaMode?: boolean;
+    /** Check if an email+token pair has been invited (required when betaMode is true) */
+    isInvited?: (email: string, inviteToken: string) => Promise<boolean>;
+}
+interface PlatformAuthClientConfig {
+    /** Base URL override (defaults to window.location.origin in browser) */
+    baseURL?: string;
+    /** Additional client plugins */
+    plugins?: any[];
+}
+interface VerifyEmailFormProps {
+    /** Email to verify */
+    email: string;
+    /** Callback on successful verification */
+    onSuccess?: () => void;
+    /** URL to navigate to on success */
+    successUrl?: string;
+    /** Auth client instance */
+    authClient: any;
+}
+interface ForgotPasswordFormProps {
+    /** Callback on successful OTP send, receives the email */
+    onSuccess?: (email: string) => void;
+    /** Link to login page */
+    loginUrl?: string;
+    /** Auth client instance */
+    authClient: any;
+}
+interface ResetPasswordFormProps {
+    /** Email address to reset password for */
+    email: string;
+    /** Callback on successful password reset */
+    onSuccess?: () => void;
+    /** Link to login page */
+    loginUrl?: string;
+    /** Auth client instance */
+    authClient: any;
+}
+interface AuthLayoutProps {
+    /** Logo element to display at the top */
+    logo?: React.ReactNode;
+    /** Page title */
+    title: string;
+    /** Subtitle below the title */
+    subtitle?: string;
+    /** Content to render inside the card */
+    children: React.ReactNode;
+    /** Footer content below the card (e.g. legal links) */
+    footer?: React.ReactNode;
+}
+
+export type { AuthLayoutProps as A, ForgotPasswordFormProps as F, PlatformAuthClientConfig as P, ResetPasswordFormProps as R, VerifyEmailFormProps as V, PlatformAuthConfig as a, PlatformAuthMailer as b, PlatformAuthMailerArgs as c, PlatformAuthMailerType as d };

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@lalternative/auth",
+  "version": "0.1.1",
+  "description": "Shared Better Auth wrapper for L'Alternative apps (server + React client + auth UI)",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./server": {
+      "import": "./dist/server.js",
+      "types": "./dist/server.d.ts"
+    },
+    "./client": {
+      "import": "./dist/client.js",
+      "types": "./dist/client.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit"
+  },
+  "peerDependencies": {
+    "better-auth": ">=1.4.0",
+    "react": ">=18.0.0",
+    "react-dom": ">=18.0.0"
+  },
+  "devDependencies": {
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "better-auth": "^1.6.11",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.7.0",
+    "zod": "^4.4.3"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lalternative/packages.git",
+    "directory": "auth"
+  }
+}